Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
File: lhJPJSRqVAn77hG1Ny3YviTG6es.mft (raw, json)
Hash identifier: dlg2iha9+Cq5fJP7flkuxeS9gxbGkmMFcuy5gYBpmb8=
Subject key identifier: DE:AC:9F:AD:94:DB:C9:65:5A:71:0B:91:1A:60:EF:F2:F5:CA:EF:4D
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 0198499C326E4EEABD51FA4FF5D909C0260B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
Manifest number: 0920
Signing time: Sun 27 Jul 2025 02:00:29 +0000
Manifest this update: Sun 27 Jul 2025 02:00:29 +0000
Manifest next update: Mon 28 Jul 2025 02:00:29 +0000
Files and hashes: 1: c3njCbUkCCL3mnp4u_KCanHzP7M.roa (hash: vVs8Ror537sKvCZah39iYsDHQqQgVb1rydMRu4BJ5YQ=)
2: lhJPJSRqVAn77hG1Ny3YviTG6es.crl (hash: 0QDQ3On27/SXcZUCaPsUPLAxaoyxxntXUCEaJgz/b0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:32:6e:4e:ea:bd:51:fa:4f:f5:d9:09:c0:26:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Jul 27 02:00:29 2025 GMT
Not After : Jul 28 02:00:29 2025 GMT
Subject: CN=deac9fad94dbc9655a710b911a60eff2f5caef4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:fd:4c:26:ab:9f:2d:32:7c:f3:36:82:0d:
df:5f:e0:9a:6f:fe:de:0a:be:5e:4e:f3:86:60:b9:
60:52:ea:a5:89:66:94:c9:40:05:1b:ab:6a:76:5f:
82:c0:d0:a4:03:fe:df:f6:cb:9a:1f:92:38:1b:b0:
9e:f4:2e:f3:4c:54:d1:5a:a5:f3:f2:8c:ab:dc:df:
0b:14:94:56:59:6b:e9:8e:60:7e:48:d6:9e:e8:3a:
81:c0:64:7c:70:27:d5:2b:25:b5:46:4a:7c:7b:03:
5e:c5:6b:fb:f7:6f:df:f2:f2:b9:13:75:da:49:74:
5b:b6:16:f2:21:62:17:37:bd:cc:c9:35:c8:0c:c5:
23:a0:53:6f:63:f8:d0:1c:f6:b9:09:0d:2a:8f:78:
28:f9:a8:f0:25:3e:4a:98:00:72:7e:a5:24:8a:80:
1b:42:49:4b:ac:e9:f6:6b:0a:96:dc:82:d1:1a:6f:
5d:dd:20:9b:d6:c3:52:89:7e:0e:a9:01:a9:c4:3d:
c3:b4:04:c4:92:cb:09:e8:b8:06:82:ee:82:d5:7d:
b7:bb:23:8d:1e:d4:79:c5:7d:06:77:de:84:92:b7:
15:ab:d2:da:9c:bd:2f:1b:2c:eb:26:a9:cb:68:70:
3b:40:9c:c3:f4:37:18:c1:ea:ab:0a:84:a2:86:91:
86:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AC:9F:AD:94:DB:C9:65:5A:71:0B:91:1A:60:EF:F2:F5:CA:EF:4D
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:37:41:ae:71:34:d1:d7:2d:27:95:06:e6:44:00:e9:65:ef:
b0:7d:9d:b7:c3:2e:55:fe:81:f7:00:4e:d9:a2:93:f6:7d:a1:
10:07:ea:4f:0d:42:c3:f1:59:8a:fc:54:27:90:03:9b:e3:70:
a9:5b:2c:8e:a1:d0:5e:7a:48:97:bc:8b:20:91:ac:0b:ec:5e:
2b:6f:47:ca:38:56:52:e1:f1:dc:e9:11:c9:ae:b4:ee:a2:26:
50:3e:78:79:e4:0e:8e:72:e4:81:53:1e:96:8c:d3:9b:93:09:
03:5a:a4:78:3a:a3:a2:b9:18:c7:7a:e7:a9:94:00:d9:5b:dc:
1e:84:ec:32:35:61:92:6e:73:d5:11:21:b5:df:27:e6:ea:fb:
1c:d9:5a:3f:2f:78:88:d6:a5:a1:5b:cc:66:69:b9:53:d2:e3:
d3:2b:2a:40:9e:f4:1b:fa:87:df:d0:5c:a0:e5:06:d3:95:11:
48:d9:e5:86:83:24:0c:a6:1c:fb:d7:56:4b:9b:99:27:d4:1e:
50:26:50:5c:45:d8:28:8a:3b:27:cc:d8:27:3b:ec:56:58:4a:
cd:d3:0b:1a:42:8f:df:b0:3c:cb:df:6e:d5:31:ac:a8:49:1b:
d8:4f:7f:ae:67:ce:d5:3e:55:78:11:fe:7a:80:ff:57:bb:2d:
d6:46:29:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:22:45 2025 by rpki-client